Unscored severity · published May 4, 2011
CVE-2011-1826
Open redirect vulnerability in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allows remote attackers to redirect users to…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Open redirect vulnerability in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AW
Arcot Webfort Versatile Authentication Server · CA
through 6.2.4 · source: NVD
Affected product
AW
Arcot Webfort Versatile Authentication Server
CA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1826
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1826
osvdb.org
http://osvdb.org/72125
Vendor Advisory
http://secunia.com/advisories/44317
www.securityfocus.com
http://www.securityfocus.com/archive/1/517702/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/47588
www.securitytracker.com
http://www.securitytracker.com/id?1025444
www.vupen.com
http://www.vupen.com/english/advisories/2011/1114
More from Arcot Webfort Versatile Authentication Server
–
CVE-2011-1825
Multiple cross-site scripting (XSS) vulnerabilities in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allow remote attackers to…